Lucene search
+L

CVE-2024-45332

🗓️ 13 May 2025 21:03:12Reported by intelType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 260 Views

Sensitive information exposure due to Intel Processor microarchitectural predictor vulnerability.

Related
Affected
Refs
Social
[
  {
    "vendor": "n/a",
    "product": "Intel(R) Processors",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

syedaquib77

Vulnerability Update: Intel CPU Branch Privilege Injection Flaw CVE: CVE-2024-45332 Timeline: Disclosure date remains 2024-05-13. Intel released microcode updates after receiving the report in September 2024. Full technical details will be presented at USENIX Security 2025. exploitMaturity: Remains at Proof-of-Concept, with detailed exploit demonstration by ETH Zurich researchers and no known real-world exploit reported by Intel so far. affectedVersions: The affected versions remain Intel CPUs from the 9th generation onward (Coffee Lake, Comet Lake, Rocket Lake, Alder Lake, Raptor Lake), with possible prediction bypass on processors as old as 7th generation (Kaby Lake). New information clarifies older generations lack certain mitigations making them less relevant to this specific exploit. Also, Arm Cortex-X1, Cortex-A76, and AMD Zen 4 and Zen 5 chips are not vulnerable. fixedVersions: Mitigations include microcode updates released by Intel, firmware-level mitigations (with approx. 2.7% performance overhead), and software mitigations (with 1.6% to 8.3% performance impact, depending on CPU). Users are advised to apply BIOS/UEFI and OS updates. Summary: CVE-2024-45332 is a critical vulnerability affecting modern Intel CPUs that allows leakage of sensitive privileged data due to branch predictor race conditions. While core details remain consistent, this update brings enhanced technical depth, confirms affected versions, and details mitigation impacts. Exploit maturity remains proof-of-concept with no known widespread attack. Description: The vulnerability is a race condition flaw in modern Intel CPUs' branch predictors that allows non-privileged users to leak sensitive privileged memory data through speculative execution. The updated description provides more technical detail on the asynchronous predictor update and the specifically exploited branch predictors (BTB and IBP), and emphasizes the exploit demonstration on Ubuntu 24.04 with default mitigations enabled. Leak rates of up to 5.6 KB/sec at 99.8% accuracy have been observed. Impact Scope: Recommended Actions: - Apply latest BIOS/UEFI updates - Apply OS updates - Be aware of performance impact: firmware mitigations ~2.7% overhead; software mitigations 1.6% to 8.3% depending on CPU Related Resources: - https://t.co/QZjcXRK5xA - https://t.co/lQ1aX4CQMs Tags: #CPU #DataLeak #Intel #Processor #SideChannelAttack #SpeculativeExecution #SpeculativeExecutionSideChannel #Cybersecurity

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 07:54Current
6.2Medium risk
Vulners AI Score6.2
CVSS 3.15.6
CVSS 45.7
EPSS0.00261
SSVC
260